Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/26082d0f-611e-377d-97c9-b926a7b7547f.roa
File:                     26082d0f-611e-377d-97c9-b926a7b7547f.roa (raw, json)
Hash identifier:          hhov+ajWDO5MSZO5U0a5xlCVvijmLdDbWW0cD1SnulU=
Subject key identifier:   33:F9:25:DE:B0:36:74:71:C5:84:EB:69:2E:60:C0:C8:F4:FF:D1:B5
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F4328584B64CC9DC9ED3A38B30CC64380
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/26082d0f-611e-377d-97c9-b926a7b7547f.roa
Signing time:             Fri 03 Oct 2025 01:00:32 +0000
ROA not before:           Fri 03 Oct 2025 01:00:32 +0000
ROA not after:            Thu 01 Jan 2026 02:00:32 +0000
asID:                     12041
IP address blocks:        2001:500:ec::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:64:cc:9d:c9:ed:3a:38:b3:0c:c6:43:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Oct  3 01:00:32 2025 GMT
            Not After : Jan  1 02:00:32 2026 GMT
        Subject: CN=ad54aebb-424b-42e6-9a7e-1fd36ae6f086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f9:77:d0:7f:7b:90:32:de:99:17:8b:60:5d:
                    15:06:f7:7c:13:d5:dc:fb:7e:5a:0f:ca:31:38:16:
                    ac:ac:5f:c1:4c:d0:ec:8e:df:5a:74:a0:4c:70:78:
                    b6:9e:e3:23:e9:18:51:af:7f:1a:18:ab:43:c0:30:
                    22:46:d5:39:9b:17:97:6a:57:d2:a4:bb:f5:78:c7:
                    42:c2:f9:1c:3b:c9:40:f8:5c:09:d4:4d:4e:3d:7e:
                    a6:85:43:12:f5:3e:ce:2c:0d:b6:08:cf:27:3e:3e:
                    d4:9c:c3:4e:9a:f7:2c:fe:4a:b1:7b:42:e3:7e:4e:
                    2a:93:82:dd:26:8d:b1:4b:ab:67:b2:d5:90:cf:e5:
                    85:85:44:63:82:61:e2:c3:60:34:2d:c9:d0:1c:a4:
                    fa:5d:e4:5e:57:15:15:fa:c0:16:73:93:bc:93:55:
                    de:80:c4:a7:77:a6:fa:d9:7b:91:86:26:4c:42:2e:
                    c9:04:ae:41:06:93:6f:a9:2d:b3:ca:78:1a:70:7d:
                    f1:86:57:7e:58:7b:b5:50:cc:79:56:70:a9:c6:ae:
                    4b:4c:90:e8:8a:d5:e4:39:6a:e1:fe:fd:8d:28:9c:
                    ad:2d:6a:0d:59:a9:d2:77:b5:f7:3b:fb:46:27:f7:
                    df:2d:43:ff:b5:e8:8d:f4:12:27:ce:d2:bc:cd:8b:
                    72:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F9:25:DE:B0:36:74:71:C5:84:EB:69:2E:60:C0:C8:F4:FF:D1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/26082d0f-611e-377d-97c9-b926a7b7547f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:500:ec::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:9d:02:9c:b2:1f:52:d1:37:bb:13:9d:c7:95:15:f3:1f:94:
         f3:44:c7:07:a2:40:76:ae:4f:29:c0:e0:ff:b8:d2:fd:d1:45:
         c2:c6:98:57:52:4d:28:06:a4:3a:1d:de:23:51:93:d3:24:c0:
         19:ff:e1:a9:48:a4:c0:2b:48:ba:bd:db:98:f6:e0:06:5c:f5:
         bd:ce:59:a4:ae:c8:e4:22:b6:aa:ce:5e:75:26:ad:2f:aa:10:
         d7:0b:53:b3:4d:63:68:78:ff:e9:f4:42:7c:ab:ef:16:57:c4:
         49:1e:91:e0:60:08:af:4d:76:32:9b:f3:b8:60:33:21:d8:e5:
         97:10:c3:54:85:51:6d:e8:0f:7f:fb:ed:29:e2:c0:5c:c4:8f:
         d6:e8:8d:f4:68:8c:e7:13:9d:32:88:0f:97:f8:63:fc:34:0c:
         c8:4f:20:58:78:9a:30:cd:c9:cc:6b:20:2d:97:05:c7:b6:3b:
         1e:da:10:62:3a:93:04:27:7b:93:6b:2c:bb:cf:74:3f:0b:13:
         e9:7e:51:35:41:56:63:62:23:dc:88:ed:5e:11:71:78:b5:8d:
         3a:60:c2:dd:42:ac:75:f1:d8:9d:24:60:3a:d9:ae:d8:34:d2:
         fc:3f:23:07:d6:8d:bc:74:70:3e:c9:40:e7:85:c4:65:ad:64:
         0d:d0:db:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:54:14 2025 by rpki-client